Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    XClient.exe

  • Size

    76KB

  • MD5

    d299566894dfe7f85acfbf1033a6425b

  • SHA1

    85533e1a427294aa3f9ab39fdf6d3ef855c4a3e2

  • SHA256

    e62a5239c4599571d58fc59c7456024b8abf78b280bfcf5369658759ba9608b5

  • SHA512

    0dbb85499b71767eac55935c51bc7de7ff332e3839b890e1a0da042f832508a74e625ed4ea83366d641c32183569bf48a35679286a295b53babf74a14098d2bf

  • SSDEEP

    1536:ns+MEaCLEpdl03+ceHbI0NQQTiE7UB6vOKyTSEnNq3x:CvRpdSSHbI0ZdgeOKaSEnCx

Score
10/10
xworm

Malware Config

Extracted

Family

xworm

Version

3.1

C2

seems-radio.gl.at.ply.gg:2519

Attributes
  • Install_directory

    %Temp%

  • install_file

    USB.exe

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections